PKI Operations Engineer: Certificate Lifecycle & Automation

Optum Philippines; Manila; On-site; PHP 1,000,000 - 1,400,000; Full time

Job summary

Optum Philippines is seeking an experienced PKI and certificate management specialist to join our global health tech team in Manila. This role focuses on certificate lifecycle operations, TLS/HTTPS, and infrastructure automation to ensure secure, reliable services for enterprise platforms.

You will work with Windows and Linux servers, web servers, and load balancers, implementing policy-based PKI, performing health checks, and supporting audits and compliance.

Qualifications

• Undergraduate degree or equivalent experience.
• 5+ years in compute, infrastructure, or systems administration.
• 3+ years hands-on experience managing PKI and certificate services.
• 3+ years hands-on experience managing certificates and PKI in production environments.
• Solid operational experience with certificate issuance and renewals.
• Familiarity with enterprise certificate platforms and tooling.

Responsibilities

• Certificate & PKI Administration and lifecycle management.
• Manage certificate issuance, renewal, revocation, and retirement for internal and external TLS certificates.
• Automation & operational enablement to streamline deployments and renewals.
• Support compute, platform integration, and TLS standards across servers and load balancers.
• Governance, risk & compliance activities and documentation.

Skills

PKI Administration

Certificate lifecycle management

Automation scripting

TLS/HTTPS knowledge

Windows/Linux servers

Education

Bachelor's degree or equivalent

Tools

Venafi

Keyfactor

AppViewX

DigiCert/Sectigo

Job description

Optum Philippines is seeking an experienced PKI and certificate management specialist to join our global health tech team in Manila. This role focuses on certificate lifecycle operations, TLS/HTTPS, and infrastructure automation to ensure secure, reliable services for enterprise platforms.

You will work with Windows and Linux servers, web servers, and load balancers, implementing policy-based PKI, performing health checks, and supporting audits and compliance.